$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38.cer File: 1534b7d7-f616-427d-9bc3-85d1bd789f38.cer (raw, json) Hash identifier: idIqpO0x++5/1pwL+iYJLjL+D9xhizsHDweJIb3rO4k= Subject key identifier: 10:A0:D4:E6:05:D3:61:6F:A3:C8:32:72:85:02:09:5B:58:BE:E5:D2 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848BBB3E9FD11C331FFAE41C4C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/1534b7d7-f616-427d-9bc3-85d1bd789f38.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 01 Feb 2025 01:45:33 +0000 Certificate not after: Fri 07 May 2027 00:45:33 +0000 Subordinate resources: AS: 33141 AS: 36494 IP: 204.89.218.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:b3:e9:fd:11:c3:31:ff:ae:41:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 1 01:45:33 2025 GMT Not After : May 7 00:45:33 2027 GMT Subject: CN=1534b7d7-f616-427d-9bc3-85d1bd789f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4b:71:4a:22:28:f6:ec:53:ac:1f:7e:bc:7a: c9:4a:dd:2a:61:11:94:d0:34:83:2b:15:20:cf:ce: a7:37:36:80:9f:9c:d1:00:3c:a4:3c:fb:fd:e5:17: 12:4b:bd:95:43:e7:a0:0c:96:3e:d1:b6:b1:be:a7: 43:17:b1:a6:54:ae:aa:a9:c9:e8:80:c4:d4:c7:01: e2:ac:a1:2d:a2:48:63:0c:15:a4:d8:8b:6d:72:8e: 50:56:b6:d4:ff:bb:9c:f5:0f:72:62:8b:bc:42:b6: 6a:90:fa:d3:dd:3d:00:23:b0:9a:b0:45:c6:ff:a9: 28:62:10:4c:a8:ec:e3:6c:dc:b7:4a:3b:97:7b:36: e1:1d:0b:cb:0e:c2:e9:3d:0a:08:f8:e4:7c:45:f1: 92:f0:e6:30:e2:4a:c2:43:72:e9:fa:a5:bb:80:59: 79:00:5e:10:10:5e:54:9a:b6:ab:0b:71:6c:72:45: f2:f3:44:54:60:7a:46:84:cd:55:fb:9e:3a:a9:ca: 2a:62:a4:ec:3e:b7:d6:eb:5d:d3:39:ae:02:af:cc: 24:04:cb:98:e5:e1:47:63:b5:4b:b2:42:0c:ce:72: 27:e7:01:91:0b:4a:3c:89:01:6a:86:3e:7f:80:75: 18:e1:f8:0c:db:38:3d:13:fe:b2:ca:16:88:83:3c: c3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A0:D4:E6:05:D3:61:6F:A3:C8:32:72:85:02:09:5B:58:BE:E5:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/1534b7d7-f616-427d-9bc3-85d1bd789f38.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.89.218.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33141 36494 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:da:ce:15:1b:fa:d8:da:d4:9e:71:d4:e8:6e:b1:8c:aa:07: 43:30:e1:ca:e5:01:1c:4a:1d:20:a0:c1:7e:b4:94:d3:39:45: 0d:d7:68:ee:c1:8b:4f:0a:e8:bf:90:22:33:7f:a5:d8:d9:14: 54:1e:7d:f3:40:6c:9e:4c:d3:7a:91:3a:29:66:3b:85:16:e5: 35:2e:2f:0a:c3:bb:3f:21:38:d2:26:1f:ea:1b:d4:05:99:ec: 0d:8a:28:c5:a1:9a:b9:ad:42:0b:2a:e9:69:44:b0:01:c7:c0: ec:60:6d:15:03:76:5d:b9:96:b8:bb:33:52:17:b7:3f:c9:13: f6:64:2e:9f:fd:7c:4d:58:17:c6:f4:e0:b8:ab:cf:7b:6e:9c: ae:1b:eb:2a:1a:ca:bd:2b:2d:dc:89:a6:d0:35:23:c8:0c:db: f4:a1:ab:11:62:c2:e7:83:9e:72:5d:99:79:d0:c7:10:82:fe: 98:81:cd:c0:a7:80:ac:fb:64:77:28:a9:35:4d:a9:82:8c:59: 25:30:48:de:cf:83:eb:fd:9e:c7:96:21:ae:59:5f:0c:23:7f: 78:9e:8e:4a:b0:4d:6e:f4:06:fa:28:12:cd:1e:1d:20:c2:5c: 35:7c:0e:2c:4a:d3:04:63:20:12:df:bd:2d:a4:66:d2:67:c0: ea:74:1b:6b -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEi7s+n9EcMx/65BxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDIwMTAxNDUzM1oXDTI3MDUwNzAwNDUzM1owLzEtMCsGA1UEAxMk MTUzNGI3ZDctZjYxNi00MjdkLTliYzMtODVkMWJkNzg5ZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EtxSiIo9uxTrB9+vHrJSt0qYRGU0DSDKxUg z86nNzaAn5zRADykPPv95RcSS72VQ+egDJY+0baxvqdDF7GmVK6qqcnogMTUxwHi rKEtokhjDBWk2Ittco5QVrbU/7uc9Q9yYou8QrZqkPrT3T0AI7CasEXG/6koYhBM qOzjbNy3SjuXezbhHQvLDsLpPQoI+OR8RfGS8OYw4krCQ3Lp+qW7gFl5AF4QEF5U mrarC3FsckXy80RUYHpGhM1V+546qcoqYqTsPrfW613TOa4Cr8wkBMuY5eFHY7VL skIMznIn5wGRC0o8iQFqhj5/gHUY4fgM2zg9E/6yyhaIgzzDFQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFBCg1OYF02Fvo8gycoUCCVtYvuXSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x NTM0YjdkNy1mNjE2LTQyN2QtOWJjMy04NWQxYmQ3ODlmMzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzE1MzRiN2Q3LWY2MTYtNDI3ZC05 YmMzLTg1ZDFiZDc4OWYzOC8xNTM0YjdkNy1mNjE2LTQyN2QtOWJjMy04NWQxYmQ3 ODlmMzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMWdowHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgID AIF1AgMAjo4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAINrOFRv62NrUnnHU6G6xjKoHQzDhyuUBHEodIKDB frSU0zlFDddo7sGLTwrov5AiM3+l2NkUVB5980BsnkzTepE6KWY7hRblNS4vCsO7 PyE40iYf6hvUBZnsDYooxaGaua1CCyrpaUSwAcfA7GBtFQN2XbmWuLszUhe3P8kT 9mQun/18TVgXxvTguKvPe26crhvrKhrKvSst3Imm0DUjyAzb9KGrEWLC54Oecl2Z edDHEIL+mIHNwKeArPtkdyipNU2pgoxZJTBI3s+D6/2ex5YhrllfDCN/eJ6OSrBN bvQG+igSzR4dIMJcNXwOLErTBGMgEt+9LaRm0mfA6nQbaw== -----END CERTIFICATE-----Generated at Sat May 10 07:21:58 2025 by rpki-client